File Manipulation Vulnerability in Docker Desktop for Windows
CVE-2022-37326

7.8HIGH

Key Information:

Vendor

Docker

Status
Desktop
Vendor
CVE Published:
27 April 2023

What is CVE-2022-37326?

A security flaw in Docker Desktop for Windows prior to version 4.6.0 allows attackers to exploit the dockerBackendV2 windowscontainers/start API. By manipulating the pidfile field in the DaemonJSON within the WindowsContainerStartRequest class, attackers can create or delete files on the system. This capability may lead to unauthorized privilege escalation, reflecting a significant risk for users operating versions older than 4.6.0.

References

https://docs.docker.com/desktop/release-notes/#docker-des...
https://www.cyberark.com/resources/threat-research-blog/b...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2022-37326 : File Manipulation Vulnerability in Docker Desktop for Windows